Contact Us
Division of Personnel Security and Access Control
Personnel Security
Helpdesk: 301-402-9755
e-QIP: 301-402-9735
Appointment Line: 301-496-0051
E-mail: orspersonnelsecurity@
mail.nih.gov
Access Control
Helpdesk: 301-451-4766
E-mail: facilityaccesscontrol@
mail.nih.gov
|
|
|
HHS ID Badge/PIV Card Rollout Scorecard
Here are the most recent NIH badging statistics provided by HHS as of September 14, 2012.
Sponsored: 38,187 Enrolled: 37,824 Issued: 37,463*
*This figure represents 98.1% of individuals who have been sponsored.
|
Paperless e-QIP Process Saves Time, Increases Efficiency
New NIH hires (employees, contractors and affiliates) can now complete and submit both their e-QIP questionnaires and their signature pages electronically. DPSAC is encouraging everyone who receives notification to complete e-QIP to do just that to help reduce paperwork and speed up the PIV process.
According to DPSAC Director CAPT Theresa Minter, "Now that all new NIH hires are able to submit their e-QIP questionnaires and signature pages electronically, DPSAC can achieve a 99% paperless work environment. Achieving this goal makes the process more efficient and benefits everyone involved," Minter explained.
New NIH hires no longer need to take time out of their work day to deliver paperwork to the personnel security office when they choose to electronically upload their own Signature Pages and additional required forms directly into e-QIP along with their questionnaire.
"Going electronic not only helps DPSAC reduce its carbon footprint, it also speeds up the Personal Identity Verification (PIV) process for the applicant. It's a win-win-win for the new NIH hire, the DPSAC staff, and the environment," Minter concluded.
|
NED v3.2.2 Goes Live
Below are excerpts from a September 7, 2012 message from the NED team to NED users announcing the deployment of NED v3.2.2.
NED v3.2.2 is a minor release that includes ... support for OD/OCIO-requested changes to the NIH Active Directory (AD) account provisioning process, (including):
- NED will require successful fingerprint adjudication or an NCIC check prior to authorizing AD accounts.
- NED will authorize and de-authorize FDA staff AD accounts in the same manner as NIH staff (i.e., NIH IT Service Desk staff will no longer create/delete/manage FDA staff AD accounts).
- NED will require FDA AOs to perform annual AD account review and re-sponsor users still needing accounts.
|
New Code Letters Help Identify Certificates
As of July, 2012, all newly issued and renewed PIV Card/HHS ID Badge certificates now include a code letter at the end of the "Issued to" name to allow users to easily differentiate between types of certificates -- Authentication, Encryption and Signing.
This new code letter suffix defines the use of each certificate, making it easier to identify and select the correct certificate.
Note: certificates issued or renewed prior to July 2012 will not show the code letter.
Below are examples of how the certificates with codes appear:
- John Doe -A - identifies the client Authentication certificate
- John Doe -E - identifies the e-mail Encryption certificate
- John Doe -S - identifies the digital Signature certificate
Individuals requiring additional information should contact the NIH IT Service Desk at 301-496-4357 (local), 866-319-4357 (toll-free), or 301-496-8294 (TTY) or submit an online service request at: http://itservicedesk.nih.gov/support.
|
November/December NED Training Schedule
The HSPD-12 Program Office offers free NED training for beginners and experienced NED users. Take advantage of this opportunity to quickly master NED in a hands-on computer lab environment. NED for Beginners
Date: Monday, November 5, 2012
Time: 9:00 a.m. - 12:00 p.m. (noon)
Location: Building 12A, Room B51
Date: Wednesday, December 12, 2012 Time: 9:00 a.m. - 12:00 p.m. (noon) Location: Building 12A, Room B51
NED for Advanced Users
Date: Monday, November 5, 2012
Time: 1:00 p.m. - 4:00 p.m. (noon)
Location: Building 12A, Room B51
Date: Wednesday, December 12, 2012 Time: 1:00 p.m. - 4:00 p.m. (noon) Location: Building 12A, Room B51
Contact Lanny Newman at newmanl@mail.nih.gov to reserve a space. In your e-mail, provide Lanny with your name and IC and which course you would like to attend.
|
New HHS ID Badge Card Stock Gets a Boost NIH will soon begin issuing PIV Cards/HHS ID Badges using card stock with enhanced storage capabilities. The new badges will contain 128k computer chips, essentially doubling the storage capacity of the 64k chips currently in the PIV Cards/HHS ID Badges at NIH. Before January 1, 2011, manufacturers produced 64k card stock as the standard for PIV Cards. These cards can only store active certificates; they cannot archive expired certificate keys. While users of the 64k cards who require access to their expired certificates are able to download 'soft' versions of these expired certificate keys to their computers, they are not able to store them on their smart cards. Users of these cards have access only to the information that is encrypted with active certificates. As of January 1, 2011 the card manufacturer supplying NIH discontinued production of the 64k smart card and began producing the 128k smart card. Once NIH has exhausts its supply of 64k cards, which will occur soon, it will begin issuing the 128k cards. These cards will have enhanced capabilities, including: - Storage space for up to 5 archived certificates
- Advanced encryption
Note: the transition from 64k to 128k cards will have no effect on issuance time, nor will there be any requirement for additional software. Also, badge holders with 64k card stock will not notice any change in the performance of their PIV cards during the migration to 128k cards. DPSAC or the appropriate local badging office will notify badge holders when it is time to come in for a new PIV Card/HHS ID Badge. The badging office will issue the more robust 128k PIV Card at that time. |
Helpful Tips
ICs that want to add LWS operators to the approved roster -- send a written request to Richie Taffet at taffetr@mail.nih.gov. Your request should include the new operator's name, their IC, their NED #, as well as the operator's e-mail address, building/room and phone number.
Once Mr. Taffet has approved the request, he will forward the name(s) to HHSIdentityAdmins@deloitte.com to complete the approval process, add the name to the LWS operator roster, and inform the IC that the individual is now approved to operate the IC's LWS.
NIH employees, contractors or affiliates with expired certificates can now renew their 'certs' at a Lifecycle Work Station (LWS) -- they no longer need to visit a badge issuance station for this task.
Renewing digital certificates at your desktop -- Some ICs have elected to deploy 'Access Card Utility (ACU)' software that allows individuals to renew their digital certificates at their computer IF the certificates are within 42 days of expiration and not yet expired. The user does not have to be connected to the NIH network, either internally or via VPN, to use the ACU. A connection to the Internet is all that is required.
To find out if your IC is ACU-enabled, check with one of your IC's LWS operators: http://www.ors.od.nih.gov/ser/dpsac/badge/Pages/lifecycle.aspx.
If they do not know, they will be able to check with their HSPD-12 Point of Contact.
Take your HHS ID Badge with you after you've logged in -- When icons appear on your desktop, you are completely logged in and can remove your PIV card/HHS ID Badge from the card reader. Replace it in your badge holder right away to avoid physical access problems!
Keep your passwords up to date to avoid having your account deactivated -- everyone transitioning away from username & password to HHS ID Badge/PIV Card & PIN login will still need to update their password when they receive an e-mail notice that their password is about to expire. Otherwise, they will be locked out of their computer until they have updated their password, even though they may not be using their password for login.
Sign up for the NIH Password Self Service program, iForgotMyPassWord, so you can always manage your password and unlock your account at: https://iforgotmypassword.nih.gov/.
If an LWS is not available in your IC or your immediate area, and you work in the greater Bethesda or Rockville area -- please call 301-451-4766 or 301-402-9755 to schedule an appointment with the Division of Personnel Security and Access Control located in Building 31 or in Building 10, South Lobby, Room 1C52. Both locations are on the NIH main campus. If you work outside the Bethesda/Rockville area, contact your local badge issuance office. Do not lend your HHS ID Badge/PIV Card to anyone -- lending out your HHS ID Badge/PIV Card is prohibited. The issuance of the HHS ID Badge/PIV Card is based on strict identity proofing and the determination of one's suitability for a specific position classification. |
News Briefs
Online PIV Video Explains HSPD-12 and FIPS 201
By now, all NIH employees, contractors and affiliates are aware that when they were issued an HHS ID Badge/PIV Card they were required to undergo a background check that confirmed their suitability for Federal employment.
Those interested in learning more about the presidential mandate (HSPD-12) requiring all federal agencies to employ the common identification standard known as Personal Identity Verification (PIV) can watch the PIV Overview training video posted at: http://www.ors.od.nih.gov/ser/dpsac/training/Pages/video.aspx. This video explains HSPD-12 and the corresponding technical standard FIPS 201.
|
FAQs Q. I am an LWS operator. Why do the old certificates still appear along with the new certificates once the certificates are renewed? People are complaining that they see their expired certificate along with the new one when they log into the computer with their PIV Card/HHS ID Badge. A. A check of OPM repositories is conducted on each individual prior to requesting a new or updated investigation. If the search concludes that the individual has already met the requirements for the work they would be doing at NIH, then no new investigation would be initiated. [For example, no new investigation would be required if the work an individual will be performing for NIH has been designated to a non-sensitive (Level-1) position and they have had a previous favorable investigation that either meets or exceeds the requirements for a non-sensitive position]. In response to the second part of your question, if the individual has been subject to a previous favorable investigation that either meets or exceeds the requirements for the work being performed for NIH, and there is clear evidence there has been no break in employment or service for more than 24 months, then it would not be necessary to request a new or updated investigation.
|
A biweekly e-newsletter from the Office of Research Resources, Division of Personnel Security and Access Control (ORS/DPSAC) to keep you informed as NIH rolls out "Homeland Security Presidential Directive 12" (HSPD-12) establishing a common identification standard to better safeguard NIH and its workforce.
|
|
|
|